Aleksei Leontev

– Contributing to a team responsible for the day-to-day operation and monitoring of the Networks and project delivery – Maintain and optimize network infrastructure to ensure high availability and performance – Configure, troubleshoot, and support routers, switches, firewalls, and VPNs – Setup and maintenance of production network infrastructure, as well as contributing to the configuration of network devices related to project delivery – Mostly focus on implementing and support routing and security projects: VeloCloud SD-WAN, Cisco ISE, Fortigates, Cisco ASA and WatchGuard firewalls, NetScaler (Citrix ADC), remote access, routing and switching, Wi-Fi. – Delivered projects: 1. Optimization of the number of firewalls and reduction of license quantities 2. Identification and resolution of firewall performance issues 3. Preparation and implementation of remote access with multi-factor authentication, RDSH farm, high availability, and load balancing, including analysis and optimization of access policies. Seamless transition of users to the new remote access system. 4. Development, testing, and implementation of secure access based on Cisco ISE for Aruba switches and 3500,9800 WLCs. Also implemented TACACS+ for network equipment 5. Automated guest Wi-Fi account lifecycle using Python + Cisco ISE API 6. Design, implementation, and maintenance of Fortinet firewalls. Application of policies in coordination with the Security team 7. Designed BGP-EVPN VXLAN fabric (L2VNI, L3VNI, VRF) – ready for deployment 8. Enforced network micro-segmentation 9. Designed and deployed FortiManager integration with Cisco ISE via pxGrid for real-time SGT (Security Group Tag) propagation. 10. Provision of 24/7 L2/L3 customer support

– Analyzing, reviewing and evaluating customer requirements. – Designing and implementing network automation solutions using Inmanta Service Orchestrator based on ISP's specifications (MPLS, L2VPN, L3VPN, EVPN) . – Implementing custom-tailored integrations with 3rd party technologies and platforms. – Conducting POCs for customers.

– L3 support for the customers LAN/WAN/Wireless/AAA/Security solutions, as well as engaging with Cisco and Fortinet TAC. – Planning the architecture and implementation of IT infrastructure projects. – Work with new customers at the pre-sales stage. – Led full project lifecycle: requirements gathering, solution design, BoM coordination, and implementation. – Engineered multiple Cisco ISE implementations (802.1X/MAB, profiling, TrustSec, Remote Access) – Designed & deployed TACACS+ with role-based access control (RBAC) – Implemented Cisco WSA & ESA security appliances – Optimized firewall rule bases - reduced rule count and consolidated devices – Led micro-segmentation projects. – Migrated legacy SSL VPN → Cisco AnyConnect + Microsoft MFA (zero downtime transition) – Designed & deployed VXLAN solutions on H3C/Aruba platforms – Implemented IPSec, DMVPN, ADVPN, SD-WAN connectivity solutions – Created Python automation for backup & upgrade of 200+ routers